In this Policy, "personal information" means information that is personal information under the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act"). In connection with the Services, we may collect the following information and other customer information, which may include personal information:

• Information that you register with the Services (name, nickname, zip code, date of birth, gender, address, telephone number, e-mail address and password, etc.)
• Information related to your profile (e.g., display photo, hobbies, place of residence, age, and other personal information)
• Information for payment (bank account and credit card information, as well as information if credit card payment could not be made, if applicable)
• Information about your communication terminal (your IP address, usage status, history, location information, terminal used, services you have used and products you have purchased, pages and advertisements you have viewed, time of use, method of use, environment of use, etc.)

The Company will use the personal information it has acquired for the following purposes. If we have notified you of the purposes of use of your personal information separately from this policy when we collect your personal information, we will use such personal information for the purposes notified separately, in addition to the purposes listed below:

• To provide the Services as well as other information
• To confirm your identity and prevent fraudulent use of the Services
• To optimize the contents and advertisements displayed on the Services for individual customers
• To improve the Services
• To enhance the contents of the Services
• To plan, review, develop, and provide new services
• To select the subjects of surveys to be conducted in connection with the Services or new services
• To send prizes or products to customers
• To contact you with information about the Services or new services
• To refuse the use of the Services by those who violate the Terms of Service, such as those who delay payment of fees, use the Services for unauthorized or improper purposes, or cause damage to other customers or third parties
• To create statistical data processed into a format that does not allow individuals to be identified
• To bill customers for usage fees related to the Services
• To make payments to customers from the Company
• To respond to inquiries from customers
• To maintain, improve, and troubleshoot systems, and to provide information regarding technical support
• For other purposes incidental or related to the above purposes of use and the Company's business.

The Company may change the purposes of use of personal information to the extent that it is reasonably deemed to be relevant. Any changes will be notified in this application or on the website operated by the Company.

We will handle personal information obtained only to the extent necessary to achieve the purpose of use. When handling personal information outside the scope of the purpose of use, we will obtain prior consent from the customer. However, this does not apply in the following cases:

• When required by law
• When it is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the individual
• When it is especially necessary to improve public health or to promote the sound growth of children and it is difficult to obtain the consent of the person in question.
• When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and obtaining the consent of the individual is likely to impede the execution of such affairs.

We will obtain personal information by legal and fair means, and will not obtain personal information by illegal means against the will of our customers. When obtaining personal information indirectly, we will confirm that the provider of the personal information has obtained it properly from the person himself/herself. Personal information obtained, whether indirectly or directly, will be handled appropriately.

We supervise our employees as necessary and appropriate to ensure that personal information is managed safely against risks such as loss, destruction, falsification, and leakage of personal information.

In addition, when we outsource all or part of the handling of personal information, we will enter into a confidentiality agreement with the outsourcee in advance that conforms to this policy, and we will provide necessary and appropriate supervision to ensure that the information is appropriately and safely managed by the outsourcee.

We will provide personal information to third parties in the following cases:

• When we provide personal information to an entity that performs such optimization in order to optimize the delivery or display of our or a third party's advertisements for an individual customer
• When providing personal information to a third party based on the customer's instructions or consent
• When the provision of personal information to a third party is permitted under the Personal Information Protection Law, such as when a court of law, supervisory authority, or other public agency requests that the acquired information be provided

In addition to the above, we may also use a third party (including a third party in a foreign country) to perform some of the operations related to the operation of the Services, such as product delivery, payment settlement, response to inquiries from customers, provision of related after-sales services, and research and analysis of information. In such cases, personal information may be provided to the third party and we will enter into a contract regarding the entrustment of personal information, and will exercise necessary and appropriate supervision over the entrusted third party.

In order to achieve the purposes of use stipulated in this Policy, or as otherwise notified to customers individually by the Company, the Company may share the personal information of customers acquired by the Company through the Services with its parent company, subsidiaries, and affiliates.

In this case, the items of personal information to be shared will be the information described in 1. Purposes of use by the parties with whom personal information is shared will be the purposes stated in 2. Purposes of Use of Personal Information above (however, "the Company" will be defined as "the parent company, subsidiaries and affiliates of the Company" and "the Services" as "services provided by the parent company, subsidiaries and affiliates of the Company").The person responsible for the management of such personal information is the Company.

In such cases, we will manage your information responsibly and ensure that it is handled in accordance with this policy.

In addition, we may share users' personal information with our business alliance partners to the extent necessary for the provision of alliance services. In this case, we will disclose in advance the name of the business partner (including the name of the person responsible for the management of the information), the purpose of joint use, and the type of information to be shared.

The Company may disclose, correct, add or delete the content of, suspend the use of, notify the purpose of use of, erase, or suspend the provision of personal information to third parties (hereinafter referred to as "disclosure, etc.") from the customer. We will respond without delay to your requests for disclosure, etc. (hereinafter referred to as "Disclosure, etc.") in accordance with each of the following items.

Upon receiving a request for disclosure, etc., from a customer, the Company shall verify the identity of the customer using the method specified below or a method separately designated by the Company, and then disclose the information. However, if the Company is not obligated to disclose, etc. under laws and regulations, the Company may, at its own discretion, not disclose.

We will confirm the identity of the customer by sending an e-mail to the e-mail address already provided by the customer and asking the customer to reply to the e-mail.

The procedure for disclosure after identification confirmation shall be as separately announced by the Company after completion of identification confirmation.

A fee of 1,000 yen will be charged for each application for disclosure.

However, the Company may not disclose all or part of the information in the following cases:

• If there is a risk of harm to the life, body, property, or other rights or interests of the customer or a third party
• If there is a risk of significant hindrance to the proper execution of our business
• If there is a risk of violating other laws and regulations

We may provide information such as cookies and access logs to third parties in order to improve the quality of the Services or to optimize the content and advertisements displayed for individual customers.

In addition to complying with laws, regulations, and other standards, we will review our handling of personal information from time to time and strive for continuous improvement, and may change this policy as necessary. Any changes to this policy will be posted on this application or on the website operated by the Company, or otherwise notified in an easily understandable manner. However, when making changes to the contents that require the consent of users under laws and regulations, we will obtain the consent of the users by a method separately determined by us.

For any inquiries (regarding personal information, complaints, requests for consultation, and requests for disclosure, etc.) please contact at support@bmsg.jp